SOC Analyst (L1) – Security Operations Center

About the role

The SOC Analyst (L1) joins a 24x7 Security Operations Center to monitor, detect, analyse and respond to cyber‑threats across enterprise environments. You will work with a range of security tools, follow established runbooks and ensure incidents are handled within SLA.

Key responsibilities

• Monitor security alerts from SIEM, SOAR, EDR and other tools.
• Perform triage, validation and investigation of alerts according to priority (P1‑P4).
• Execute containment, response and remediation actions using runbooks.
• Manage incidents through the full case lifecycle, documenting status and closure.
• Escalate high‑severity incidents and ensure SLA compliance.
• Participate in shift handovers with complete context.
• Identify operational issues and suggest improvements.

Required profile

• Bachelor’s degree in Computer Science, Information Security, IT or related field.
• 1‑3 years of experience in Security Operations, IT security or a similar role.
• Basic understanding of cyber‑threats, attack vectors and the CIA triad.
• Strong analytical, problem‑solving and communication skills.

Required skills

• Experience with SIEM, SOAR and EDR platforms.
• Knowledge of Windows and Linux/Unix operating systems.
• Understanding of networking concepts (TCP/IP, OSI model, DNS, HTTP/S).
• Familiarity with the MITRE ATT&CK framework.
• Exposure to cloud security concepts (Azure, AWS, GCP) – advantage.